CVE-2022-51008

Name of the Vulnerable Software and Affected Versions PocketMine-MP versions prior to 4.12.3

Description The software fails to limit unauthenticated sessions, which allows attackers to exhaust available player slots. This occurs when sessions are created without sending a LoginPacket, enabling a flood of unauthenticated connections that occupy the maximum player capacity and prevent legitimate players from joining the server.

Recommendations Update to version 4.12.3 or later.